Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:maximo_asset_management:6.2:*:*:*:*:*:*:*

part: a version: 6.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMaximo Asset Management (ea4e4ac3-3b33-5764-8a2b-e6af03864f11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3084 vulnerable 2026-06-08 05:05:31.042677 Details available
IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2.8, 7.1, and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended write-access restrictions on calendar entries via unspecified vectors.
Published: 2014-08-29T10:00:00.000Z
Updated: 2024-08-06T10:35:55.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3025 vulnerable 2026-06-08 05:05:30.744138 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.2, and 7.2 for Tivoli Asset Management for IT and certain other products allow remote authenticated users to inject arbitrary web script or HTML via unspecified input to a .jsp file under webclient/utility/.
Published: 2014-07-30T10:00:00.000Z
Updated: 2024-08-06T10:28:46.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0915 vulnerable 2026-06-08 05:05:15.066997 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.2, and 7.2 for Tivoli Asset Management for IT and certain other products allow remote authenticated users to inject arbitrary web script or HTML via (1) the KPI display name field or (2) a portlet field.
Published: 2014-07-30T10:00:00.000Z
Updated: 2024-08-06T09:27:20.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0914 vulnerable 2026-06-08 05:05:15.025983 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 6.2 through 6.2.8 for Tivoli IT Asset Management for IT and Maximo Service Desk allows remote authenticated users to inject arbitrary web script or HTML via the Query Description Field.
Published: 2014-07-30T10:00:00.000Z
Updated: 2024-08-06T09:27:20.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5395 vulnerable 2026-06-08 05:04:51.495348 Details available
IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors.
Published: 2013-10-01T10:00:00.000Z
Updated: 2024-08-06T17:06:52.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5383 vulnerable 2026-06-08 05:04:51.469499 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5382 vulnerable 2026-06-08 05:04:51.468546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5381 vulnerable 2026-06-08 05:04:51.464653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5380 vulnerable 2026-06-08 05:04:51.456984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4027 vulnerable 2026-06-08 05:04:33.596454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4021 vulnerable 2026-06-08 05:04:33.578168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4020 vulnerable 2026-06-08 05:04:33.576961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4019 vulnerable 2026-06-08 05:04:33.575953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4018 vulnerable 2026-06-08 05:04:33.575300 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4014 vulnerable 2026-06-08 05:04:33.556376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4013 vulnerable 2026-06-08 05:04:33.555453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3323 vulnerable 2026-06-08 05:04:30.893577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3048 vulnerable 2026-06-08 05:04:30.002444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0451 vulnerable 2026-06-08 05:03:48.079821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6355 vulnerable 2026-06-08 05:03:00.010012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3327 vulnerable 2026-06-08 05:02:09.199165 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3323 vulnerable 2026-06-08 05:02:09.177579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3322 vulnerable 2026-06-08 05:02:09.172788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3316 vulnerable 2026-06-08 05:02:09.141267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0195 vulnerable 2026-06-08 05:00:39.878300 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4819 vulnerable 2026-06-08 04:59:33.113590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4818 vulnerable 2026-06-08 04:59:33.113036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4817 vulnerable 2026-06-08 04:59:33.112259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4816 vulnerable 2026-06-08 04:59:33.099393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1397 vulnerable 2026-06-08 04:57:58.817510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1396 vulnerable 2026-06-08 04:57:58.816804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1395 vulnerable 2026-06-08 04:57:58.816292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1394 vulnerable 2026-06-08 04:57:58.798884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.